Kueri detail sertifikat client atau server dengan DescribeClientCertificate - Certificate Management Service - Alibaba Cloud - Certificate Management Service

Mengkueri detail Sertifikat klien atau Sertifikat server berdasarkan pengenal uniknya.

Deskripsi operasi

You can call this operation to query the details of a client certificate or server certificate by its unique identifier. The details include the serial number, subject, content, and status of the certificate.

Before you call this operation, you must create a client certificate or a server certificate.

To create a client certificate by calling an API operation, see the following topics:

To create a server certificate by calling an API operation, see the following topics:

Limits

The queries per second (QPS) limit for this operation is 10 per user. If you exceed this limit, throttling is triggered. This may affect your business. Call the operation based on your needs.

Coba sekarang

Coba API ini di OpenAPI Explorer tanpa perlu penandatanganan manual. Panggilan yang berhasil akan secara otomatis menghasilkan contoh kode SDK sesuai dengan parameter Anda. Unduh kode tersebut dengan kredensial bawaan yang aman untuk penggunaan lokal.

Test

RAM authorization

Tabel berikut menjelaskan otorisasi yang diperlukan untuk memanggil API ini. Anda dapat menentukannya dalam kebijakan Resource Access Management (RAM). Kolom pada tabel dijelaskan sebagai berikut:

Action: Aksi yang dapat digunakan dalam elemen Action pada pernyataan kebijakan izin RAM untuk memberikan izin guna melakukan operasi tersebut.
API: API yang dapat Anda panggil untuk melakukan aksi tersebut.
Access level: Tingkat akses yang telah ditentukan untuk setiap API. Nilai yang valid: create, list, get, update, dan delete.
Resource type: Jenis resource yang mendukung otorisasi untuk melakukan aksi tersebut. Ini menunjukkan apakah aksi tersebut mendukung izin tingkat resource. Resource yang ditentukan harus kompatibel dengan aksi tersebut. Jika tidak, kebijakan tersebut tidak akan berlaku.
- Untuk API dengan izin tingkat resource, jenis resource yang diperlukan ditandai dengan tanda bintang (*). Tentukan Nama Sumber Daya Alibaba Cloud (ARN) yang sesuai dalam elemen Resource pada kebijakan.
- Untuk API tanpa izin tingkat resource, ditampilkan sebagai All Resources. Gunakan tanda bintang (*) dalam elemen Resource pada kebijakan.
Condition key: Kunci kondisi yang didefinisikan oleh layanan. Kunci ini memungkinkan kontrol granular, berlaku baik hanya untuk aksi maupun untuk aksi yang terkait dengan resource tertentu. Selain kunci kondisi spesifik layanan, Alibaba Cloud menyediakan serangkaian common condition keys yang berlaku di semua layanan yang didukung RAM.
Dependent action: Aksi dependen yang diperlukan untuk menjalankan aksi tersebut. Untuk menyelesaikan aksi tersebut, pengguna RAM atau role RAM harus memiliki izin untuk melakukan semua aksi dependen.

Action

Access level

Resource type

Condition key

Dependent action

yundun-cert:DescribeClientCertificate

get

*全部资源

*

None

Parameter permintaan

Parameter	Type	Required	Description	Example
Identifier	string	Yes	Pengenal unik Sertifikat klien atau Sertifikat server yang ingin Anda kueri. Catatan Anda dapat memanggil operasi ListClientCertificate untuk mengkueri pengenal unik semua Sertifikat klien dan Sertifikat server.	d3b95700998e47afc4d95f886579****

Selain parameter permintaan sebelumnya, Anda harus menentukan parameter permintaan umum saat memanggil operasi ini. Untuk informasi lebih lanjut tentang parameter permintaan umum, lihat Common parameters.

Untuk informasi lebih lanjut tentang format permintaan, lihat contoh permintaan di bagian Examples pada topik ini.

Elemen respons

Element	Type	Description	Example
	object	DescribeCertificateResponse<CertificateWithContentDTO>
Certificate	object	The details of the client certificate or server certificate.
X509Certificate	string	The content of the certificate.	-----BEGIN CERTIFICATE----- ...... -----END CERTIFICATE-----
Identifier	string	The unique identifier of the certificate.	d3b95700998e47afc4d95f886579****
SerialNumber	string	The serial number of the certificate.	62b2b943a32d96883a6650e672ea0276****
SubjectDN	string	The subject distinguished name (DN) of the certificate. The value consists of the following fields: C: the country. O: the organization. OU: the organizational unit. CN: the common name. ST: the province or state. CN: the common name.	C=CN,O=Aliyun,OU=Security,L=Hangzhou,ST=Zhejiang,CN=Aliyun
CommonName	string	The common name of the certificate.	aliyun.com
OrganizationUnit	string	The organizational unit of the certificate subject.	Security
Organization	string	The organization associated with the certificate of the issuing intermediate certificate authority (CA).	Aliyun
Locality	string	The city in which the subject organization is located.	Hangzhou
State	string	The province or state in which the subject organization is located.	Zhejiang
CountryCode	string	The country code of the subject organization. For more information about country codes, see the International codes section of the Manage company profiles topic.	CN
Sans	string	The Subject Alternative Name (SAN) extension of the certificate. The SAN extension specifies other domain names or IP addresses that are associated with the certificate. The value is a string that is converted from a JSON array. Each element in the JSON array is a struct that corresponds to a SAN extension. Each SAN extension struct contains the following parameters: Type: the type of the extension. The value is of the integer type. Valid values: 1: an email address. 2: a domain name. 6: a Uniform Resource Identifier (URI). 7: an IP address. Value: the content of the extension. The value is of the string type.	[ {"Type": 7, "Value": "192.0.XX.XX"}, {"Type": 2, "Value": "www.aliyundoc.com"}, ]
Status	string	The status of the certificate. Valid values: ISSUE: The certificate is issued. REVOKE: The certificate is revoked.	ISSUE
BeforeDate	integer	The issuance date of the certificate. The value is a UNIX timestamp. Unit: milliseconds.	1634283958000
AfterDate	integer	The expiration date of the certificate. The value is a UNIX timestamp. Unit: milliseconds.	1665819958000
Algorithm	string	The type of the encryption algorithm. Valid values: RSA: the RSA algorithm. ECC: the ECC algorithm. SM2: the SM2 algorithm.	RSA
KeySize	integer	The key length of the certificate.	4096
SignAlgorithm	string	The signature algorithm of the certificate.	SHA256WITHRSA
CertificateType	string	The type of the certificate. Valid values: CLIENT: a client certificate. SERVER: a server certificate.	SERVER
ParentIdentifier	string	The unique identifier of the intermediate CA certificate that issued the certificate.	160ae6bb538d538c70c01f81dcf2****
Sha2	string	The SHA-256 fingerprint of the certificate.	14dcc8afc7578e1fcec36d658f7e20de18f6957bbac42b373a66bc9de4e9****
Md5	string	The MD5 fingerprint of the certificate.	d3b95700998e47afc4d95f886579****
Days	integer	The validity period of the certificate. Unit: days.	365
ResourceGroupId	string	The ID of the resource group to which the certificate belongs.	rg-acfmxllajdpw3fi
CertChain	string	The complete certificate chain.	-----BEGIN CERTIFICATE----- cert -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- subCA -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- rootCA -----END CERTIFICATE-----
CustomIdentifier	string	The custom identifier, which is a unique key.	*3a32d96883a6650e672ea0276**
UploadFlag	integer	Indicates whether the certificate is synchronized to Certificate Management Service.	1
FullAlgorithm	string	The algorithm and its length.	RSA_2048
AliasName	string	The alias of the issued certificate.	rsa_root_2048
Id	integer	The ID of the data source to which the certificate order belongs.	1137354
Tags	array<object>	The tags.	mtls
	object	The tag value.
TagKey	string	The tag key.	testKey
TagValue	string	The tag value.	[{\"tag\":\"PROPERTY_TYPE\",\"values\":[]}]
RequestId	string	The request ID.	15C66C7B-671A-4297-9187-2C4477247A74

Contoh

Respons sukses

JSONformat

{
  "Certificate": {
    "X509Certificate": "-----BEGIN CERTIFICATE-----  ...... -----END CERTIFICATE-----",
    "Identifier": "d3b95700998e47afc4d95f886579****",
    "SerialNumber": "62b2b943a32d96883a6650e672ea0276****",
    "SubjectDN": "C=CN,O=Aliyun,OU=Security,L=Hangzhou,ST=Zhejiang,CN=Aliyun",
    "CommonName": "aliyun.com",
    "OrganizationUnit": "Security",
    "Organization": "Aliyun",
    "Locality": "Hangzhou",
    "State": "Zhejiang",
    "CountryCode": "CN",
    "Sans": "[ {\"Type\": 7, \"Value\": \"192.0.XX.XX\"}, {\"Type\": 2, \"Value\": \"www.aliyundoc.com\"}, ]",
    "Status": "ISSUE",
    "BeforeDate": 1634283958000,
    "AfterDate": 1665819958000,
    "Algorithm": "RSA",
    "KeySize": 4096,
    "SignAlgorithm": "SHA256WITHRSA",
    "CertificateType": "SERVER",
    "ParentIdentifier": "160ae6bb538d538c70c01f81dcf2****",
    "Sha2": "14dcc8afc7578e1fcec36d658f7e20de18f6957bbac42b373a66bc9de4e9****",
    "Md5": "d3b95700998e47afc4d95f886579****",
    "Days": 365,
    "ResourceGroupId": "rg-acfmxllajdpw3fi",
    "CertChain": "-----BEGIN CERTIFICATE-----\ncert\n-----END CERTIFICATE-----\n-----BEGIN CERTIFICATE-----\nsubCA\n-----END CERTIFICATE-----\n-----BEGIN CERTIFICATE-----\nrootCA\n-----END CERTIFICATE-----",
    "CustomIdentifier": "***3a32d96883a6650e672ea0276****",
    "UploadFlag": 1,
    "FullAlgorithm": "RSA_2048",
    "AliasName": "rsa_root_2048",
    "Id": 1137354,
    "Tags": [
      {
        "TagKey": "testKey",
        "TagValue": "[{\\\"tag\\\":\\\"PROPERTY_TYPE\\\",\\\"values\\\":[]}]"
      }
    ]
  },
  "RequestId": "15C66C7B-671A-4297-9187-2C4477247A74"
}

Kode kesalahan

Lihat Error Codes untuk daftar lengkap.

Catatan rilis

Lihat Release Notes untuk daftar lengkap.